This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft
File:                     875E06F9E7034F27BB17B17F859BD523F124DED9.mft (raw, json)
Hash identifier:          615eBGxNKMLgtl4euLYqIcKVKQiBVsGjUOabt7r/z20=
Subject key identifier:   FF:D7:10:A5:D6:50:96:D4:B6:EB:4A:49:03:55:D3:D9:35:87:CF:F5
Authority key identifier: 87:5E:06:F9:E7:03:4F:27:BB:17:B1:7F:85:9B:D5:23:F1:24:DE:D9
Certificate issuer:       /CN=875E06F9E7034F27BB17B17F859BD523F124DED9
Certificate serial:       68FD45339D7D1F96A072790C6E5E63B7ABF6F65C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft
Manifest number:          0159
Signing time:             Mon 22 Dec 2025 23:06:58 +0000
Manifest this update:     Mon 22 Dec 2025 23:01:58 +0000
Manifest next update:     Wed 24 Dec 2025 01:33:58 +0000
Files and hashes:         1: 875E06F9E7034F27BB17B17F859BD523F124DED9.crl (hash: vX29JIg0JTFumxgWbAMUho+8YyH5B8tgtZHH5SSQf2g=)
                          2: 34352e3139312e3232302e302f32322d3234203d3e20323632363433.roa (hash: +FrAGbNXAdYP8Pg/39Rwp2kCBHQmS+GNecRIK54X8DY=)
                          3: 3139312e33362e3230382e302f32312d3234203d3e20323632363433.roa (hash: dtLW+BKAXyh0XbtqxhyJwFT61qqx+1ewdQmC8tdwffY=)
                          4: 3136382e3230352e3230302e302f32322d3234203d3e20323632363433.roa (hash: 6hYL1AScEenC1R3PomvWNbwxg863EWC/9H1CMG413UI=)
                          5: 323830343a313439633a3a2f33322d3438203d3e20323632363433.roa (hash: MZySJ9O65lOMB41izMUoiG2UbNQhdh7QbaXRVWlgOJE=)
                          6: 3137372e3130352e3131322e302f32302d3234203d3e20323632363433.roa (hash: ajD4Kp5vkLb88kXcqGYZjNrIHeoaWOLwL+xcCtKorEA=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.crl
                          rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 24 Dec 2025 01:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fd:45:33:9d:7d:1f:96:a0:72:79:0c:6e:5e:63:b7:ab:f6:f6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875E06F9E7034F27BB17B17F859BD523F124DED9
        Validity
            Not Before: Dec 22 23:01:58 2025 GMT
            Not After : Dec 24 01:33:58 2025 GMT
        Subject: CN=FFD710A5D65096D4B6EB4A490355D3D93587CFF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:49:3f:81:63:d1:bc:db:98:57:a2:1f:49:
                    5f:e7:f4:0a:f2:16:f6:1d:0c:71:e5:54:1a:2e:52:
                    a0:64:54:82:e2:8a:3b:9d:3c:21:3b:99:07:08:65:
                    be:3d:7c:03:74:89:c9:ac:54:ca:4f:2c:b8:2e:39:
                    65:87:bb:e9:61:e7:d2:35:74:b6:4d:b0:7c:ca:09:
                    4c:e0:9e:42:6d:01:5f:8a:08:c0:d5:d3:69:4e:37:
                    16:a4:58:51:67:f4:94:2c:48:34:c2:17:96:f7:75:
                    4d:ae:57:55:86:9c:66:3b:27:d8:04:0b:e0:85:1c:
                    94:a1:d9:5a:0a:81:5b:72:38:68:e7:a6:3c:08:e7:
                    9f:07:a0:32:58:e9:af:b1:fd:46:04:cc:54:20:9f:
                    13:03:ea:dc:fc:5b:e8:d2:03:b8:d7:a6:4b:a4:9d:
                    ff:18:ef:73:ea:ee:95:b8:3d:d0:6d:36:c7:8d:17:
                    6c:ce:a7:e6:78:ec:06:79:63:38:70:8f:f7:43:4c:
                    4f:47:ca:4c:1c:b3:7e:0c:c1:df:ed:1f:0f:31:14:
                    68:0e:38:3d:cd:56:31:9f:b8:0a:46:e3:69:21:36:
                    69:53:1a:93:6a:56:26:96:21:25:d4:ab:20:23:79:
                    c7:28:c8:34:d7:74:f7:ac:ff:c3:cf:15:2b:81:fa:
                    ba:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D7:10:A5:D6:50:96:D4:B6:EB:4A:49:03:55:D3:D9:35:87:CF:F5
            X509v3 Authority Key Identifier:
                keyid:87:5E:06:F9:E7:03:4F:27:BB:17:B1:7F:85:9B:D5:23:F1:24:DE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/875E06F9E7034F27BB17B17F859BD523F124DED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8qY9GiyiCQM8ZewG7LATyyFRtN7TLheigYWiuJkHG4Yh/0/875E06F9E7034F27BB17B17F859BD523F124DED9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7e:ec:48:bd:6a:1e:93:f9:47:27:63:81:cd:b2:3a:10:a5:
         49:4b:ed:be:a3:d1:45:96:cc:57:94:28:9e:96:99:cb:71:af:
         ea:7e:21:fa:a0:0a:e9:16:8b:e5:63:32:4a:41:1d:63:74:57:
         68:b9:9e:8e:fd:4d:e2:bc:1c:50:60:ac:d7:3b:db:4f:40:34:
         2f:3a:d8:da:7e:35:37:46:df:32:d5:37:67:76:39:3a:20:32:
         33:83:a2:c5:bf:3f:86:fc:9b:bb:3a:3f:e1:c8:a0:03:0d:ce:
         ba:cb:eb:4c:ef:90:c8:a2:0f:4d:65:d4:c5:61:3d:91:9a:a9:
         f5:29:4b:c2:ea:6c:20:55:3a:72:5c:24:94:9f:5d:31:0c:17:
         92:46:2c:83:14:f2:54:5d:72:0d:c4:55:cc:e1:e9:1f:14:48:
         d6:9b:76:86:51:a9:8c:b1:4a:87:aa:7b:1a:6d:0f:3d:41:a6:
         fb:f9:b8:84:68:27:8f:f0:bd:0f:17:e6:c6:3a:13:e6:e7:8f:
         1f:ea:02:a0:e9:d5:0d:10:8a:d1:ee:65:d6:e3:3b:82:09:04:
         d9:b1:68:aa:a8:a5:7c:63:b5:a2:b0:0c:09:4d:10:a4:61:f2:
         2f:13:e4:69:10:30:65:3f:c3:78:51:3c:b8:2f:fd:6f:db:c5:
         1a:f5:2b:c9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUaP1FM519H5agcnkMbl5jt6v29lwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc1RTA2RjlFNzAzNEYyN0JCMTdCMTdGODU5QkQ1MjNG
MTI0REVEOTAeFw0yNTEyMjIyMzAxNThaFw0yNTEyMjQwMTMzNThaMDMxMTAvBgNV
BAMTKEZGRDcxMEE1RDY1MDk2RDRCNkVCNEE0OTAzNTVEM0Q5MzU4N0NGRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6Uk/gWPRvNuYV6IfSV/n9Ary
FvYdDHHlVBouUqBkVILiijudPCE7mQcIZb49fAN0icmsVMpPLLguOWWHu+lh59I1
dLZNsHzKCUzgnkJtAV+KCMDV02lONxakWFFn9JQsSDTCF5b3dU2uV1WGnGY7J9gE
C+CFHJSh2VoKgVtyOGjnpjwI558HoDJY6a+x/UYEzFQgnxMD6tz8W+jSA7jXpkuk
nf8Y73Pq7pW4PdBtNseNF2zOp+Z47AZ5Yzhwj/dDTE9Hykwcs34Mwd/tHw8xFGgO
OD3NVjGfuApG42khNmlTGpNqViaWISXUqyAjeccoyDTXdPes/8PPFSuB+rr5AgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU/9cQpdZQltS260pJA1XT2TWHz/UwHwYDVR0j
BBgwFoAUh14G+ecDTye7F7F/hZvVI/Ek3tkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHFZOUdpeWlDUU04WmV3RzdMQVR5eUZSdE43VExoZWlnWVdpdUprSEc0
WWgvMC84NzVFMDZGOUU3MDM0RjI3QkIxN0IxN0Y4NTlCRDUyM0YxMjRERUQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3NUUwNkY5RTcwMzRGMjdC
QjE3QjE3Rjg1OUJENTIzRjEyNERFRDkuY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB
igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
OHFZOUdpeWlDUU04WmV3RzdMQVR5eUZSdE43VExoZWlnWVdpdUprSEc0WWgvMC84
NzVFMDZGOUU3MDM0RjI3QkIxN0IxN0Y4NTlCRDUyM0YxMjRERUQ5Lm1mdDAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA
MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdX7sSL1qHpP5Rydjgc2yOhClSUvtvqPRRZbMV5QonpaZy3Gv6n4h+qAK6RaL
5WMySkEdY3RXaLmejv1N4rwcUGCs1zvbT0A0LzrY2n41N0bfMtU3Z3Y5OiAyM4Oi
xb8/hvybuzo/4cigAw3OusvrTO+QyKIPTWXUxWE9kZqp9SlLwupsIFU6clwklJ9d
MQwXkkYsgxTyVF1yDcRVzOHpHxRI1pt2hlGpjLFKh6p7Gm0PPUGm+/m4hGgnj/C9
DxfmxjoT5uePH+oCoOnVDRCK0e5l1uM7ggkE2bFoqqilfGO1orAMCU0QpGHyLxPk
aRAwZT/DeFE8uC/9b9vFGvUryQ==
-----END CERTIFICATE-----
Generated at Tue Dec 23 07:55:11 2025 by rpki-client